$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/09a3b8ba-ac7e-4e0e-891c-aa20e5fe442c/5ac0a3d9-be9f-36c9-9bb9-86dbc92658a3.roa File: 5ac0a3d9-be9f-36c9-9bb9-86dbc92658a3.roa (raw, json) Hash identifier: dTc21wm5D1X6qVe2NGY/7lotH6lCupf3a+wE8kr+Q6s= Subject key identifier: A4:CD:98:B0:80:22:83:76:D5:15:D9:4A:73:96:E9:56:55:3D:96:20 Certificate issuer: /CN=09a3b8ba-ac7e-4e0e-891c-aa20e5fe442c Certificate serial: 010D0C9F4328584902EC1091F7221EA880145A60 Authority key identifier: C4:52:EF:29:27:F2:EC:5A:51:3C:C1:72:D6:73:BD:1E:39:05:95:26 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/09a3b8ba-ac7e-4e0e-891c-aa20e5fe442c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/09a3b8ba-ac7e-4e0e-891c-aa20e5fe442c/5ac0a3d9-be9f-36c9-9bb9-86dbc92658a3.roa Signing time: Wed 26 Feb 2025 14:00:51 +0000 ROA not before: Wed 26 Feb 2025 14:00:51 +0000 ROA not after: Tue 27 May 2025 13:00:51 +0000 asID: 399989 IP address blocks: 2607:340::/28 maxlen: 28 2607:340::/29 maxlen: 29 2607:348::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/09a3b8ba-ac7e-4e0e-891c-aa20e5fe442c/09a3b8ba-ac7e-4e0e-891c-aa20e5fe442c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/09a3b8ba-ac7e-4e0e-891c-aa20e5fe442c/09a3b8ba-ac7e-4e0e-891c-aa20e5fe442c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/09a3b8ba-ac7e-4e0e-891c-aa20e5fe442c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:02:ec:10:91:f7:22:1e:a8:80:14:5a:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09a3b8ba-ac7e-4e0e-891c-aa20e5fe442c Validity Not Before: Feb 26 14:00:51 2025 GMT Not After : May 27 13:00:51 2025 GMT Subject: CN=bd7ce6b2-25cd-4b76-aea6-7bb65b3c454b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:40:f7:d7:cc:f0:a1:c2:0d:a2:90:14:d5:da: e6:68:41:02:26:90:28:2d:31:ae:fb:76:4d:f1:32: d9:7c:aa:69:1f:28:6b:23:58:b5:0a:13:3b:57:1c: 06:80:97:4e:ae:30:b9:aa:23:ad:a2:b6:72:0d:4a: 16:b5:48:38:f4:d1:41:94:96:87:91:3f:17:8d:4f: 29:ba:c9:dc:36:3b:f0:ce:d3:ba:51:12:13:db:b9: 3d:09:fa:f4:cb:54:d6:94:2f:a8:8d:49:c6:8d:d2: 2e:13:79:51:9b:9d:7a:28:57:65:cf:5a:04:2b:2f: 13:06:06:7a:d7:a4:3a:10:5c:01:4e:70:cf:80:21: 56:3a:90:ef:00:01:4e:89:e4:b1:8b:a6:a8:ef:5c: 2d:40:eb:aa:6f:8d:af:b5:a0:7e:9a:1c:bb:19:61: a3:57:65:66:32:c7:e1:0e:1d:dd:b0:a8:eb:dc:5c: 6c:f4:24:c9:f7:6e:36:69:1c:85:48:b9:24:3c:0c: f7:b9:6a:90:76:f7:55:49:75:a6:29:fb:a9:61:1f: a0:5b:cc:23:4f:2b:91:49:d8:66:fe:dc:88:fd:3e: a0:23:ce:64:aa:77:79:27:67:07:0c:98:48:5a:6e: 4a:3c:ce:0e:af:8d:a9:6a:cc:d2:a6:14:44:4d:8f: 7d:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:CD:98:B0:80:22:83:76:D5:15:D9:4A:73:96:E9:56:55:3D:96:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/09a3b8ba-ac7e-4e0e-891c-aa20e5fe442c/5ac0a3d9-be9f-36c9-9bb9-86dbc92658a3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/09a3b8ba-ac7e-4e0e-891c-aa20e5fe442c/09a3b8ba-ac7e-4e0e-891c-aa20e5fe442c.crl X509v3 Authority Key Identifier: keyid:C4:52:EF:29:27:F2:EC:5A:51:3C:C1:72:D6:73:BD:1E:39:05:95:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/09a3b8ba-ac7e-4e0e-891c-aa20e5fe442c.cer sbgp-ipAddrBlock: critical IPv6: 2607:340::/28 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:8d:9e:a4:11:f0:9e:78:83:a2:16:ee:a8:a1:95:f3:81:fe: 43:69:59:31:bc:c1:72:1b:7f:c7:ca:bd:8f:58:d8:da:54:a4: c7:f9:7a:95:86:04:4c:75:5d:26:d7:d0:fd:52:bd:1d:b2:ea: cb:e1:4f:c7:df:a3:d7:fd:d1:64:15:48:ce:20:84:4b:82:5e: f6:46:89:92:7f:91:09:95:c2:53:6a:ea:ee:70:18:d7:2c:fc: b0:88:dd:ac:4a:40:7b:c9:41:58:f5:36:54:ef:f8:27:86:9d: 8b:c7:95:12:43:0f:69:4f:a3:db:ab:6f:fa:9b:aa:3a:ba:d6: 31:61:42:9f:65:c6:17:fe:1b:64:b9:d6:63:09:fe:4b:f4:00: 38:4f:aa:9b:f3:29:b4:4f:83:9d:f9:0d:c6:cf:0b:db:cb:e0: 8e:35:20:48:fb:e8:36:ef:a2:6e:52:b9:2e:e6:13:f0:66:17: 6e:49:ae:cc:6d:94:f8:f6:8d:8b:8f:39:f6:07:ee:3a:4e:20: 4d:e6:55:b9:8e:ba:9f:02:bb:71:68:17:8f:07:ca:bd:8f:61: 1f:e1:31:0f:92:89:64:41:2b:e5:0e:79:20:98:8b:a2:79:99: 3e:e7:d1:b6:08:93:c1:f9:31:40:7b:d4:ce:5b:f4:3b:ff:ec: db:88:aa:58 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEkC7BCR9yIeqIAUWmAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDlhM2I4YmEtYWM3ZS00ZTBlLTg5MWMtYWEyMGU1ZmU0 NDJjMB4XDTI1MDIyNjE0MDA1MVoXDTI1MDUyNzEzMDA1MVowLzEtMCsGA1UEAxMk YmQ3Y2U2YjItMjVjZC00Yjc2LWFlYTYtN2JiNjViM2M0NTRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg0D318zwocINopAU1drmaEECJpAoLTGu+3ZN 8TLZfKppHyhrI1i1ChM7VxwGgJdOrjC5qiOtorZyDUoWtUg49NFBlJaHkT8XjU8p usncNjvwztO6URIT27k9Cfr0y1TWlC+ojUnGjdIuE3lRm516KFdlz1oEKy8TBgZ6 16Q6EFwBTnDPgCFWOpDvAAFOieSxi6ao71wtQOuqb42vtaB+mhy7GWGjV2VmMsfh Dh3dsKjr3Fxs9CTJ9242aRyFSLkkPAz3uWqQdvdVSXWmKfupYR+gW8wjTyuRSdhm /tyI/T6gI85kqnd5J2cHDJhIWm5KPM4Or42paszSphRETY993wIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFKTNmLCAIoN21RXZSnOW6VZVPZYgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8wOWEz YjhiYS1hYzdlLTRlMGUtODkxYy1hYTIwZTVmZTQ0MmMvNWFjMGEzZDktYmU5Zi0z NmM5LTliYjktODZkYmM5MjY1OGEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMDlhM2I4YmEtYWM3ZS00ZTBlLTg5 MWMtYWEyMGU1ZmU0NDJjLzA5YTNiOGJhLWFjN2UtNGUwZS04OTFjLWFhMjBlNWZl NDQyYy5jcmwwHwYDVR0jBBgwFoAUxFLvKSfy7FpRPMFy1nO9HjkFlSYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8wOWEzYjhiYS1hYzdlLTRlMGUtODkxYy1hYTIw ZTVmZTQ0MmMuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUEJgcDQDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCJjZ6kEfCeeIOiFu6ooZXzgf5DaVkxvMFyG3/Hyr2PWNjaVKTH+XqV hgRMdV0m19D9Ur0dsurL4U/H36PX/dFkFUjOIIRLgl72RomSf5EJlcJTaurucBjX LPywiN2sSkB7yUFY9TZU7/gnhp2Lx5USQw9pT6Pbq2/6m6o6utYxYUKfZcYX/htk udZjCf5L9AA4T6qb8ym0T4Od+Q3Gzwvby+CONSBI++g276JuUrku5hPwZhduSa7M bZT49o2Ljzn2B+46TiBN5lW5jrqfArtxaBePB8q9j2Ef4TEPkolkQSvlDnkgmIui eZk+59G2CJPB+TFAe9TOW/Q7/+zbiKpY -----END CERTIFICATE-----Generated at Mon Apr 28 13:23:13 2025 by rpki-client